Lucene search
+L

151 matches found

OSV
OSV
added 2023/09/14 6:30 a.m.72 views

GHSA-3QC2-V3HP-6CV8 sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

5.7CVSS5.9AI score0.0075EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
added 2023/09/14 6:30 a.m.30 views

sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS5.3AI score0.0075EPSS
SaveExploits1References9Affected Software1
NVD
NVD
added 2023/09/14 5:15 a.m.34 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS7.5AI score0.0075EPSS
SaveExploits1References4
Prion
Prion
added 2023/09/14 5:15 a.m.12 views

Input validation

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

3.3CVSS4.9AI score0.0075EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/09/14 5:15 a.m.7 views

UBUNTU-CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS5.8AI score0.0075EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/09/14 5:00 a.m.38 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS7.5AI score0.0075EPSS
SaveExploits1References4
CVE
CVE
added 2023/09/14 5:00 a.m.106 views

CVE-2023-26141

CVE-2023-26141 affects sidekiq prior to 7.1.3. The vulnerability arises from insufficient checks in the dashboard-charts.js file, allowing an attacker to manipulate localStorage and trigger excessive polling, leading to Denial of Service. The DoS impact is documented across multiple feeds, with t...

7.5CVSS4.8AI score0.0075EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/09/14 5:00 a.m.14 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.9AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2023/09/14 5:00 a.m.82 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS5.7AI score0.0075EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2023/09/14 5:00 a.m.10 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.5AI score0.0075EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/14 12:00 a.m.10 views

Mike Perham sidekiq data forgery issue vulnerability

Mike Perham sidekiq is a Mike Perham open source application. Using threads to process many jobs simultaneously in the same process A security vulnerability in Mike Perham sidekiq prior to version 7.1.3, which stems from insufficient checking of the file dashboard-charts.js, allows an attacker to...

7.5CVSS6.5AI score0.0075EPSS
SaveExploits1References6
RubySec
RubySec
added 2023/09/14 12:00 a.m.40 views

sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.8AI score0.0075EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/09/14 12:00 a.m.28 views

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

7.5CVSS6.3AI score0.0075EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2023/07/25 12:00 a.m.7 views

The vulnerability of the localstorage object in the Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the localstorage storage mechanism in the Mozilla Firefox browser is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS6.8AI score0.00575EPSS
SaveExploits0References7Affected Software11
SUSE CVE
SUSE CVE
added 2023/07/07 2:19 a.m.5 views

SUSE CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS6.2AI score0.00575EPSS
SaveExploits0References7
OSV
OSV
added 2023/07/05 10:15 a.m.6 views

CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS7.4AI score0.00575EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/05 10:15 a.m.19 views

Code injection

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

4.3CVSS5.8AI score0.00575EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/07/05 10:15 a.m.7 views

UBUNTU-CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS6.8AI score0.00575EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2023/07/05 10:15 a.m.24 views

CVE-2023-3482

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox 115...

6.5CVSS6.8AI score0.00575EPSS
SaveExploits0References5
OSV
OSV
added 2023/07/05 9:23 a.m.10 views

USN-6201-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-37201, CVE-2023-37202,...

8.8CVSS7.1AI score0.00755EPSS
SaveExploits1References14
Rows per page
Query Builder